$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa File: cef491ba-6998-36c3-9897-80eae0b6f79b.roa (raw, json) Hash identifier: wY2Cd0NGWWZqFh1lkwL3IeyGRbTOOEUZc3nsZIZEOIs= Subject key identifier: 87:3E:35:1D:E9:62:33:52:D6:06:B6:AA:8E:30:49:4C:AB:76:2D:6D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B6631F42B6942EB5572D0B380 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 63199 IP address blocks: 148.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f4:2b:69:42:eb:55:72:d0:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=9e80238a-f87a-4c27-9387-c863ec43d63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:20:6d:aa:97:14:1d:6e:b6:22:1a:cd:7a: 93:48:01:1f:5a:cc:c2:aa:d9:c5:8c:bc:27:b9:11: ea:47:3e:07:6c:95:86:a3:38:45:52:16:ea:1a:9a: 0c:a7:48:93:c2:2b:f3:29:57:09:ca:1c:8b:3b:1a: 39:96:df:c4:4a:c0:34:39:fb:35:94:f1:0d:21:45: aa:73:ac:23:89:f4:cb:71:fc:cf:74:42:5e:8e:67: fc:67:cb:7a:3c:72:bc:58:17:aa:48:47:f8:b6:a6: 4c:d5:6c:b0:ee:92:db:29:5d:4b:86:57:6e:ed:35: de:51:10:1a:59:65:3d:bb:d3:77:39:11:d0:74:61: a4:7f:f7:1a:c2:a9:10:18:de:7e:ff:d5:28:59:52: 06:8b:d5:9c:59:24:a8:06:82:8e:e6:c1:41:9d:53: b8:09:75:ff:81:bd:d9:41:49:e1:e2:1b:19:2a:12: 60:d0:3e:59:1f:33:0b:37:af:01:ff:70:06:30:39: c8:3a:7c:e8:3a:09:ea:04:d6:16:65:aa:bb:a1:a0: f6:df:66:78:ad:10:54:3e:a2:3a:5c:d4:b2:d9:ab: 39:eb:f9:66:21:56:c0:a7:3b:e6:a8:cf:87:2e:c7: 92:d7:c8:0c:7d:64:40:73:ba:16:a9:a0:79:bd:1b: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3E:35:1D:E9:62:33:52:D6:06:B6:AA:8E:30:49:4C:AB:76:2D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ce:5c:7d:61:99:a7:63:3e:04:a9:98:a6:b5:a4:c3:74:28: e9:66:e4:24:f1:8e:78:fe:98:02:62:74:ef:06:09:4d:bd:36: d5:57:47:73:40:a3:bf:59:4d:0c:c6:e7:ec:5c:5a:08:80:b6: b7:bd:00:78:55:b8:cd:98:b6:84:76:e9:cc:d4:3a:81:55:34: c6:25:4c:60:ac:9c:f0:51:5b:6c:8c:28:e9:9a:0b:9e:42:db: b7:c3:5c:aa:9b:d9:3c:e6:58:8d:05:f1:08:d5:ba:da:15:bb: b1:f7:2a:3f:c0:98:86:d2:07:25:f2:2a:74:d8:cc:78:ce:5e: 70:c6:ad:7b:16:c4:e1:bf:26:f6:c4:a2:1e:fc:c7:5f:88:37: d3:1a:5a:b8:be:0b:22:ea:20:20:b3:49:61:55:8b:ae:82:2d: 31:76:06:74:aa:50:1c:7d:c2:34:d7:1b:f0:46:5b:18:74:24: de:46:ac:d6:cf:a0:27:aa:4b:c8:7e:6c:c7:4a:a3:14:7f:0c: 1c:bd:d1:55:0e:c7:3e:03:b4:fe:85:f4:f9:75:fa:a6:53:b9: 6b:ed:fd:dc:ae:aa:53:81:8b:6b:d1:35:ea:1b:bd:7c:f2:38: 5f:6c:a4:72:d1:b8:fd:ec:8c:01:65:73:16:54:6b:f2:2e:a1: 17:ae:83:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfQraULrVXLQs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk OWU4MDIzOGEtZjg3YS00YzI3LTkzODctYzg2M2VjNDNkNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ8gbaqXFB1utiIazXqTSAEfWszCqtnFjLwn uRHqRz4HbJWGozhFUhbqGpoMp0iTwivzKVcJyhyLOxo5lt/ESsA0Ofs1lPENIUWq c6wjifTLcfzPdEJejmf8Z8t6PHK8WBeqSEf4tqZM1Wyw7pLbKV1Lhldu7TXeURAa WWU9u9N3ORHQdGGkf/cawqkQGN5+/9UoWVIGi9WcWSSoBoKO5sFBnVO4CXX/gb3Z QUnh4hsZKhJg0D5ZHzMLN68B/3AGMDnIOnzoOgnqBNYWZaq7oaD232Z4rRBUPqI6 XNSy2as56/lmIVbApzvmqM+HLseS18gMfWRAc7oWqaB5vRseSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc+NR3pYjNS1ga2qo4wSUyrdi1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2VmNDkxYmEtNjk5OC0z NmMzLTk4OTctODBlYWUwYjZmNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvOXH1hmadjPgSpmKa1pMN0KOlm5CTxjnj+mAJidO8GCU29NtVXR3NA o79ZTQzG5+xcWgiAtre9AHhVuM2YtoR26czUOoFVNMYlTGCsnPBRW2yMKOmaC55C 27fDXKqb2TzmWI0F8QjVutoVu7H3Kj/AmIbSByXyKnTYzHjOXnDGrXsWxOG/JvbE oh78x1+IN9MaWri+CyLqICCzSWFVi66CLTF2BnSqUBx9wjTXG/BGWxh0JN5GrNbP oCeqS8h+bMdKoxR/DBy90VUOxz4DtP6F9Pl1+qZTuWvt/dyuqlOBi2vRNeobvXzy OF9spHLRuP3sjAFlcxZUa/IuoReugzI= -----END CERTIFICATE-----Generated at Sat Oct 11 07:27:53 2025 by rpki-client